javascriptajaxcross-domain

Twitter API XSS security

When I'm looking at Spring Source site I see js widget which requests

http://search.twitter.com/search.json

using AJAX.

How do they work around cross-domain security issue?

Solution

  • JSONP is one way to work around the security limitation.